D3-SCA — System Call Analysis

provenance: imported · ATT&CK: T1007 T1010 T1012 T1016 T1016.001 T1016.002 T1018 T1033 T1036 T1036.005 T1047 T1049 T1053 T1053.002 T1053.003 T1053.005 T1053.006 T1053.007 T1055 T1055.001 T1055.003 T1055.004 T1055.005 T1055.008 T1055.013 T1055.014 T1057 T1074 T1074.001 T1082 T1106 T1113 T1124 T1134 T1134.004 T1140 T1218 T1218.001 T1218.002 T1218.003 T1218.005 T1218.011 T1218.013 T1220 T1497 T1497.003 T1505 T1505.001 T1518 T1518.001 T1546 T1546.009 T1546.010 T1548 T1548.002 T1548.004 T1555 T1555.003

D3-SCA: System Call Analysis

MITRE D3FEND countermeasure

What it does

Analyzing system calls to determine whether a process is exhibiting unauthorized behavior.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source

MITRE D3FEND D3-SCA

technique/T1007 technique/T1010 technique/T1012 technique/T1016 technique/T1016.001 technique/T1016.002 technique/T1018 technique/T1033 technique/T1036 technique/T1036.005 technique/T1047 technique/T1049 technique/T1053 technique/T1053.002 technique/T1053.003 technique/T1053.005 technique/T1053.006 technique/T1053.007 technique/T1055 technique/T1055.001 technique/T1055.003 technique/T1055.004 technique/T1055.005 technique/T1055.008 technique/T1055.013 technique/T1055.014 technique/T1057 technique/T1074 technique/T1074.001 technique/T1082 technique/T1106 technique/T1113 technique/T1124 technique/T1134 technique/T1134.004 technique/T1140 technique/T1218 technique/T1218.001 technique/T1218.002 technique/T1218.003 technique/T1218.005 technique/T1218.011 technique/T1218.013 technique/T1220 technique/T1497 technique/T1497.003 technique/T1505 technique/T1505.001 technique/T1518 technique/T1518.001 technique/T1546 technique/T1546.009 technique/T1546.010 technique/T1548 technique/T1548.002 technique/T1548.004 technique/T1555 technique/T1555.003